                       AUDIT_PW - Audit Passwords V2.45

              Copyright  1993-1995 by Danen Information Services
                              All Rights Reserved

                              ... PRELIMINARY ...

Purpose:
        AUDIT_PW was developed to tighten up network security on Novell
        networks.  Many users use very easy to guess passwords.  AUDIT_PW uses
        a file with common passwords to try on each user account.  All common
        passwords are reported.


Syntax:
        AUDIT_PW [switches]

        /?       Help message.

        /B=xxx   Begin checking at user xxx.  If user xxx is not found, no
                 processing is done other than creating the two support files.

        /U       Process the bindery unsorted.


Files:
        AUDIT_PW.DAT    ASCII file with common passwords.  One password per
                        line. Located in the same directory as AUDIT_PW.EXE.

        $AUDIT.SF       Status file.  Contains hints about potential and real
                        problems. Written in current directory.

        $AUDIT.UI       User Information file.  Written in current directory.

        Samples of these files can be found later in this document.


Description:

        Using SYSCON (Supervisor Option) turn Intruder Detection/Lockout off
        before starting the program.  Remember the settings so you can restore
        them when your audit is done.

        Run CASTOFF to prevent messages from locking the process.

        You must have SUPERVISOR rights to run the program.

        During the audit, you may hit a key to bring up a menu.  This menu
        allows you to either lock the keyboard, or abort the process.  Once
        locked, you can only unlock (giving the proper password) the keyboard.


                                                  $audit.sf

User Audit Status File created on Mon 17-Jan-94 04:16pm

User AUDITOR has disabled account
User AUDITOR has not logged in since 14-Jul-92 (552 days ago)
User BIGBROTHER has unlimited simultaneous connections
User BIGBROTHER is not required to have a password
User GAMES has unlimited simultaneous connections
User GAMES has unlimited grace logins
User HAMILTON has unlimited simultaneous connections
User HAMILTON should change password more frequently than 90 days
User HR-ABRA can have 3 simultaneous connectionslimit to 1 or 2
User MATHEW has never logged in
User MATHEW has not changed password from given password or password has expired
User PCS has not logged in since 08-Dec-93 (40 days ago)
User PCS is not required to have a password
User PTEST has disabled account
User PTEST has not logged in since 01-Dec-93 (47 days ago)
User PTEST is not required to have a password
User SANTOS has disabled account
User SANTOS has not logged in since 04-Jan-93 (378 days ago)
User SANTOS has not changed password from given password or password has expired
User SUPERVISOR has unlimited simultaneous connections
User SUPERVISOR has unlimited grace logins
User TRAINER has not logged in since 17-Dec-93 (31 days ago)
User TRAINER has unlimited grace logins

Mon 17-Jan-94 04:16pm Checking account of ALBI
Mon 17-Jan-94 04:19pm Aborted at ALBI[ALWAYS]
                                                  $audit.ui

User Audit Information File created on Mon 17-Jan-94 04:16pm

Account Information for User ALBI [26000001]
Account Disabled:                 No
Account Has Expiration Date:      No
   Date Account Expires:          -
Limit Concurrent Connections:     Yes
   Maximum Connections:           1
Allow User To Change Password:    !!
Require Password:                 Yes
   Minimum Password Length:       6
Force Periodic Password Changes:  !!
   Days Between Forced Changes:   60
   Date Password Expires:         20-Feb-94
   Limit Grace Logins:            Yes
      Grace Logins Allowed:       6
      Remaining Grace Logins:     6
Require Unique Passwords:         !!
Last Login:                       05-Jan-94 @ 14:57:08
Restrictions:                     02h

Account Information for User BIGBROTHER [F1000003]
Account Disabled:                 No
Account Has Expiration Date:      No
   Date Account Expires:          -
Limit Concurrent Connections:     No
   Maximum Connections:           unlimited
Allow User To Change Password:    !!
Require Password:                 No
   Minimum Password Length:       0
Force Periodic Password Changes:  !!
   Days Between Forced Changes:   0
   Date Password Expires:         -
   Limit Grace Logins:            No
      Grace Logins Allowed:       unlimited
      Remaining Grace Logins:     unlimited
Require Unique Passwords:         !!
Last Login:                       17-Jan-94 @ 13:18:32
Restrictions:                     01h
                                                audit_pw.dat

turkey
turkies
academia
accepted
account
accountant
accounting
administration
administrative
admission
adrian
advertising
advise
aerobics
afterwards
agency
agricom
agriculture
airplane
albany
albatross
albert
alberta
alexander
alexis
algebra
aliases
allocator
allows
almost
alphabet
already
always
amanda
ambulance
analog
analyst
anchor
andrea
animal
animals
announcer
anonymity
anonymous
another
answer
answered
answering
anyone
anything
anyway
apologize
appear
appears
appreciated
architectural
arnold
arthur
assets
assist
assistant
association
assume
assumes
asterisk
athena
atmosphere
attempting
attend
attendant
attendants
attention

... etc. ...
